Privacy Notice - Reporting Portal

Effective Date: October, 2018

At McKesson U.S. Pharmaceutical & Specialty Health ("McKesson" or "we"), we value the trust that our customers and employees place in us to appropriately use and protect personal information. This Privacy Notice informs users of the Reporting Portal ("portal") about the purposes for which McKesson may collect, use and share personal information and how it is protected. We want you to be clear how we're using personal information and the ways in which we protect this information. By using this portal, you accept the privacy practices presented in this Privacy Notice. We encourage you to read this Privacy Notice in full to understand our privacy practices before using this portal or submitting any personal information.

Scope

This Privacy Notice applies only to the Reporting Portal (https://mprsonline.mckesson.com/reporting). McKesson affiliates and subsidiaries may have separate websites and services through other web, mobile, cloud or SaaS platforms which are not subject to this Privacy Notice. Additionally, McKesson business partners, ad networks and other third parties may have their own websites and services with separate privacy practices. We encourage you to read the privacy notices of all websites and services you visit to understand their privacy practices and your options.

Personal Information We Collect

When you use this portal, we may collect personal information about you. Personal information is any information accessed, collected, or used by McKesson that identifies an individual, or can reasonably be used to identify an individual, whether directly or indirectly. The personal information we may collect includes, but is not limited to:

Tracking Technologies We Use

We use various technologies to collect personal information about users of this portal. These technologies include the following:

These technologies are used to analyze trends, perform diagnostic services such as error reporting to improve the portal, remember user's settings and track user's movement through our platforms. We may receive reports based on the use of these technologies from companies such as Google Analytics on an individual as well as aggregated basis. To learn more about Google's privacy practices, click here. If you want to opt-out of your data being used by Google Analytics, click here.

How We Respond to "Do Not Track" Signals

Some web browsers have a "Do Not Track" feature. This feature allows you to tell websites you visit that you do not want to have your online activity tracked over time and across websites. These features are not yet uniform across browsers and not broadly supported. This portal is not currently set up to respond to those signals.

How We Use the Personal Information Collected

We may use the personal information we collect for purposes such as:

How We Share Personal Information Collected

McKesson does not sell personal information about you to third parties.

McKesson may need to share information with companies, organizations or individuals outside of McKesson if we have a good faith belief that access, use, preservation, or disclosure of that information is reasonably necessary to:

Retention

We will retain your personal information for as long as your account is active, as reasonably useful for commercial purposes, or as necessary to comply with our legal obligations, resolve disputes and enforce our agreements.

Children's Privacy

This service is not intended for any user under the age of 13, and we do not knowingly collect personal information from children under the age of 13. We request that children under the age of 13 not submit any personal information through this portal.

How We Protect Your Information

McKesson has established appropriate physical, electronic and administrative safeguards to protect the information we collect from or about our users. We restrict access to personal information to McKesson employees, contractors and agents who need to know that information to process it for us, and who are subject to confidentiality obligations. Any sensitive personal information will be transmitted in an encrypted form using SSL encryption. Notwithstanding our security safeguards, it is impossible to guarantee 100% security in all circumstances. If you have any questions about security or have reason to believe that your interaction with us is no longer secure (for example, you feel that the security of any account you might have with us has been compromised), you must immediately notify us of the problem by contacting McKesson at Privacy@McKesson.com.

Changes to this Privacy Notice

We may periodically update this Privacy Notice to describe new features, products or services we offer and how it may affect our use of personal information about you and your controls. Since we may change this Privacy Notice, we recommend that you check the current version available from time to time. If we make changes to this notice, we will update the "Effective Date" at the beginning of this notice.

Contact Information

If you have questions or concerns about this Privacy Notice, our information handling practices, or any other aspect of privacy and security of your personal information, please contact us at: Privacy@McKesson.com.

You may also write to us at:

McKesson Corporation

ATTN: Privacy Officer (Privacy Notice, MSH Reporting Portal)

2 National Data Plaza NE, 3rd Floor

Atlanta, GA 30329